Privacy Policy
Effective Date: July 1, 2025
UEB Bank (“we,” “us,” or “our”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and safeguard your information when you access our banking services, in full compliance with the EU General Data Protection Regulation (GDPR) and applicable data protection laws in Luxembourg.
1. Data Controller
The entity responsible for your personal data is:
UEB Bank
29, Avenue de la Porte Neuve, Luxembourg
Email: support@ueb-lux.com
Website: https://ueb-lux.com
2. Information We Collect
We collect personal data necessary to provide our banking and financial services and comply with legal and regulatory obligations. The categories of personal data we collect include:
• Identification Information: Name, address, date of birth, ID or passport numbers, nationality.
• Contact Information: Email address, telephone number, and postal address.
• Financial Information: Bank account details, transaction history, income, credit records, and loan information.
• Employment Information: Employer details and income verification for credit services.
• Technical Information: IP address, browser type, device details, and website usage information.
• Cookies and Analytics Data: Information gathered through cookies and analytics tools to improve our website performance and user experience.
• Marketing Preferences: Records of your communication and marketing choices.
3. How We Collect Data
We collect personal data directly and indirectly from the following sources:
• Information you provide during account opening, loan applications, or other service requests.
• Data collected through our website forms or communications via email or phone.
• Information from credit reference agencies and financial institutions.
• Information shared by payment processors and regulatory bodies for compliance purposes.
• Cookies and analytics data collected through our website (we do not operate a mobile app at this time).
4. Purpose and Legal Basis for Processing
We process your personal data only when there is a lawful basis under Article 6 of the GDPR. These include:
• Providing banking and financial services: Performance of a contract (Art. 6(1)(b))
• Account management, transactions, and communications: Performance of a contract (Art. 6(1)(b))
• Compliance with anti-money laundering (AML), tax, and regulatory obligations: Legal obligation (Art. 6(1)(c))
• Fraud prevention, risk management, and security monitoring: Legitimate interest (Art. 6(1)(f))
• Customer support and service improvements: Legitimate interest (Art. 6(1)(f))
• Sending marketing communications and updates: Legitimate interest (Art. 6(1)(f))
• Website analytics and performance tracking: Legitimate interest (Art. 6(1)(f))
5. How We Use Your Information
We use your personal data for the following purposes:
• To provide and manage banking, lending, and investment services.
• To process deposits, withdrawals, and payments securely.
• To verify your identity and prevent fraud or financial crime.
• To comply with Luxembourg financial and regulatory laws.
• To communicate with you about your accounts and transactions.
• To improve our services, operations, and customer experience.
• To send you relevant information, offers, and updates.
• To analyze website traffic and improve performance.
6. Data Sharing and Disclosure
We share personal data only when necessary and in accordance with GDPR requirements. Your information may be shared with:
• Payment Processors: To facilitate financial transactions.
• Regulatory and Legal Authorities: To comply with Luxembourg and EU banking and financial laws.
• Professional Advisors: Including auditors and legal counsel where required.
We do not sell or rent personal data to third parties for marketing purposes.
7. Data Retention
UEB Bank retains your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to comply with legal, regulatory, and anti-money laundering obligations. Typically, we retain customer and transaction records for up to 10 years after account closure, as required by Luxembourg financial regulations.
8. International Data Transfers
All data is stored and processed within the European Union (EU).
We do not transfer your personal data outside the EU/EEA.
If this changes in the future, we will ensure that appropriate safeguards are implemented, in compliance with Chapter V of the GDPR.
9. Your Rights Under the GDPR
As an EU data subject, you have the following rights regarding your personal data:
• Right of Access: Request a copy of the data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure: Request deletion of your data (“right to be forgotten”), subject to legal retention obligations.
• Right to Restriction of Processing: Request limited processing of your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing for legitimate interest or direct marketing purposes.
• Right to Withdraw Consent: Withdraw consent at any time, where processing is based on consent.
To exercise any of these rights, please contact us at support@ueb-lux.com.
You also have the right to lodge a complaint with the Luxembourg National Commission for Data Protection (CNPD).
10. Data Security
We use robust technical and organizational measures to ensure the protection of your personal data, including:
• Encryption of data during transmission and storage.
• Secure firewalls and intrusion detection systems.
• Access controls and authentication mechanisms.
• Regular security audits and staff training.
While we maintain industry-standard security, no electronic transmission or storage system is completely secure. We continuously improve our systems to minimize risks.
11. Cookies and Analytics
Our website uses cookies to enhance your browsing experience and analyze website performance. Cookies are small files stored on your device to help us recognize you and personalize content.
Types of cookies we use:
• Essential cookies: Necessary for the website to function.
• Analytics cookies: Help us understand how visitors use our site to improve performance.
You can control or delete cookies through your browser settings. However, disabling certain cookies may affect website functionality.
12. Marketing Communications
We may send you updates, offers, or information about our products and services that we believe may interest you.
You are not required to opt in, but you can opt out at any time by following the unsubscribe link in any communication or by contacting us directly at support@ueb-lux.com.
13. Supervisory Authority
UEB Bank operates under the supervision of the Commission de Surveillance du Secteur Financier (CSSF), Luxembourg’s financial regulatory authority.
If you believe that your data has not been handled in accordance with GDPR, you have the right to lodge a complaint with:
Commission nationale pour la protection des données (CNPD)
15, Boulevard du Jazz, L-4370 Belvaux, Luxembourg
14. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our data protection practices or legal obligations.
Any updates will be posted on this page with the revised “Effective Date.” We encourage you to review this policy regularly.
15. Contact Us
If you have any questions, concerns, or wish to exercise your data protection rights, please contact us:
UEB Bank
29, Avenue de la Porte Neuve, Luxembourg
Email: support@ueb-lux.com
Website: https://ueb-lux.com